Claims 

1. (Currently Amended) A method comprising: 

storing, in a memory, instructions for performing the method: 
executing the instructions on a processor: 
according to the instructions being executed: 

enumerating local credentials and remote credentials in response to 
receiving [[an]] a first event notification, wherein the first event notification is-at 
l east one of the fo ll ow i ng: 

a l ogon e v e nt; 

a l ogout e v e nt; 

comprises a lock event; and 

an un l ock e v e nt; 

based on the enumerating, evaluating the local credentials and the remote 
credentials: and 

based on the evaluating, synchronizing the local credentials and remote 
credentials. 



2. (Original) The method of claim 1, wherein synchronizing the local 

credentials and the remote credentials is based on at least one time-stamp associated 
with the local credentials and at least one time-stamp associated with the remote 
credentials. 
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3. (Original) The method of claim 1, wherein synchronizing the local 
credentials and the remote credentials is based on a comparison of hash values. 

4. (Original) The method of claim 1, wherein synchronizing includes 
error handling. 

5. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the local credentials to a remote credential cache. 

6. (Original) The method of claim 1, wherein synchronizing includes 
writing at least one of the remote credentials to a local credential cache. 

7. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the local credentials from a local credential cache. 

8. (Original) The method of claim 1, wherein synchronizing includes 
deleting at least one of the remote credentials from a remote credential cache. 

9. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the local credentials at a local credential cache based on at 
least one of the remote credentials. 
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10. (Original) The method of claim 1, wherein synchronizing includes 
modifying at least one of the remote credentials at a remote credential cache based on 
at least one of the local credentials. 

1 1 . (Original) The method of claim 1 , further comprising updating a list of 
local credentials. 

12. (Original) The method of claim 1, further comprising updating a list of 
remote credentials. 

13. (Original) The method of claim 1, further comprising determining a 
state of the remote credentials dynamically. 

14. (Original) The method of claim 1, further comprising maintaining a 
state file for the remote credentials. 

15. (Original) The method of claim 1, further comprising maintaining a 
state file for the local credentials. 

16. (Original) The method of claim 1, further comprising resolving a 
conflict of state between the local credentials and the remote credentials. 
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17. (Currently Amended) A computer readable storage media encoded with 
a computer program for executing on a computer system a computer process, tlie 
computer process comprising: 

enumerating local credentials and remote credentials in response to 
receiving an event notification, wherein the event notification comprises an 
unlock event a l ogon e v e nt and wherein the credential comprises at least one of 
the following: 

a token: and 
an XrML license ; 

synchronizing the local credentials and remote credentials via a 
synchronizing module, wherein the synchronizing module: 



sorts the local credentials and the remote credentials into a local 
credential array and a remote credential array respectively and li n e ar l y 
compares the local credential array and the remote credential array; and 

stores a state file for conflict resolution, the state file comprising: 
a file version; 

a flag, wherein the flag indicates whether the credential is 
user-protected; and 

a credential state, wherein the credential state comprises: 



last time synchronization module called; 



last time local store changed; and 



last time remote cache changed; 
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based on the synchronizing module comparing the local credential array 
and the remote credential array, removing at least one of the local credentials 
from a first local credential cache associated with a first device , wherein the 
credential removed from the first local credential cache is identified and tagged 
by the synchronization module in a remote credential cache; [[and]] 

based on the synchronizing module compahng the local credential array 
and the remote credential array, removing the tagged credential from a second 
local credential cache associated with a second device, wherein the first device 
is different than the second device, without rewriting the tagged credential to the 
remote credential cache : and 

handling errors, wherein error handling comprises returning a write state 
indication of a status of a credential write operation, wherein the write state 
indication consists of one of the following: 

a none indication, wherein the none indication comprises an 

indication that the credential was not altered: 

a partial indication, wherein the partial indication comprises an 

indication that the credential was partially altered: or 

a done indication, wherein the done indication comprises an 

indication that the credential was successfully changed . 

18. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises synchronizing the local credentials 



Serial No.: 10/821,603 

Atty Docket No.: MSI -1973US 

Atty/Agent: Jason F. Lindh 



-6- 




www.leehayes.com « 509.324.9256 



and the remote credentials is based on at least one time-stamp associated with the 
local credentials and at least one time-stamp associated with the remote credentials. 

19. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises synchronizing the local credentials 
and the remote credentials is based on a comparison of hash values. 

20. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises writing at least one of the local 
credentials to a remote credential cache. 

21. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises writing at least one of the remote 
credentials to a local credential cache. 

22. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises removing at least one of the local 
credentials from a local credential cache. 

23. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises removing at least one of the remote 
credentials from a remote credential cache. 
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24. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises modifying at least one of the local 
credentials at a local credential cache. 

25. (Previously Presented) The computer readable storage media of claim 
1 7 wherein the computer process further comprises modifying at least one of the remote 
credentials at a remote credential cache. 

26. (Previously Presented) The computer readable storage media of claim 17 
wherein the computer process further comprises updating the array of local credentials. 

27. (Previously Presented) The computer readable storage media of claim 17 
wherein the computer process further comprises updating the array of remote 
credentials. 

28. (Canceled) 

29. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises determining a state of the remote 
credentials dynamically. 

30. (Canceled) 
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31. (Canceled) 



32. (Previously Presented) The computer readable storage media of claim 
17 wherein the computer process further comprises resolving a conflict of state between 
the local credentials and the remote credentials. 

33. (Currently Amended) A system comprising: 
an event handler to receive event notifications; and 

a synchronizing module operatlvely associated with the event handler to 
synchronize local credentials and remote credentials when the event handler receives 
an event notification and if the local and remote credentials are different from one 
another, wherein the event notification is at least one of the following: 

a l ogon e v e nt; 

a l ogout e v e nt; 

a lock event; and 

an unlock event. 

34. (Canceled) 

35. (Original) The system of claim 33, wherein the credentials include at 
least one of the following: an encryption credential, a token, an asymmetric key pair, a 
symmetric key, a digital certificate, an XrML license, an authentication credential, an 
authorization credential. 
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36. (Original) The system of claim 33, further comprising a local store 
manager to enumerate the local credentials for the synchronizing module. 

37. (Original) The system of claim 33, further comprising a remote store 
manager to enumerate the remote credentials for the synchronizing module. 

38. (Original) The system of claim 33, wherein the local credentials are 
stored in a local cache. 

39. (Original) The system of claim 33, wherein the local credentials are 
stored in a local cache provided at any number (n) of clients. 

40. (Original) The system of claim 33, wherein the local credentials are 
encrypted using a master key. 

41 . (Original) The system of claim 33, wherein the remote credentials are 
stored in a remote cache. 

42. (Original) The system of claim 33, wherein the local credentials are 
stored in a remote cache provided at any number (n) of hosts. 
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43. 



(Original) 



The system of claim 33, wherein the remote credentials are 



maintained by a remote directory service. 



44. 



(Original) 



The system of claim 33, wherein the remote credentials are 



encrypted. 



45-47. (Canceled) 



48. 



(New) The method of claim 1 , further comprising: 



enumerating the local credentials and the remote credentials in response to 
receiving a second event notification, wherein the second event notification is different 
from the first event notification and comprises a startup event; 

enumerating the local credentials and the remote credentials in response to 
receiving a third event notification, wherein the third event notification is different from 
the first and second event notifications and comprises a shutdown event; 

enumerating the local credentials and the remote credentials in response to 
receiving a fourth event notification, wherein the fourth event notification is different from 
the first, second, and third event notifications and comprises a logon event; 

enumerating the local credentials and the remote credentials in response to 
receiving a fifth event notification, wherein the fifth event notification is different from the 
first, second, third, and fourth event notifications and comprises a logoff event; 
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enumerating the local credentials and the remote credentials in response to 
receiving a sixth event notification, wherein the sixth event notification is different from 
the first, second third, fourth, and fifth even notifications and comprises a unlock event; 

enumerating the local credentials and the remote credentials in response to 
receiving a seventh event notification, wherein the seventh event notification is different 
from the first, second, third, fourth, fifth, and sixth event notifications and comprises a 
session event; 

enumerating the local credentials and the remote credentials in response to 
receiving an eighth event notification, wherein the eighth event notification is different 
from the first, second, third, fourth, fifth, sixth, and seventh event notifications and 
comprises a timer event; 

enumerating the local credentials and the remote credentials in response to 
receiving a ninth event notification, wherein the ninth event notification is different from 
the first, second, third, fourth, fifth, sixth, seventh, and eighth event notifications and 
comprises a manual request; and 

enumerating the local credentials and the remote credentials in response to 
receiving a tenth event notification, wherein the tenth event notification is different from 
the first, second, third, fourth, fifth, sixth, seventh, eighth, and ninth event notifications 
and comprises a credential update event. 

49. (New) The method of claim 48, wherein the session event comprises at 

least one of: 
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a policy update; 
running a process; and 
connecting to a network. 
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